Vendor news
Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
239 matching stories — release, in Vulnerability Management — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
metadefender-k8s metadefender_software_supply_chain-4.0.4
metadefender-k8s mdcluster-2.9.0
PatrowlHearsData 2026-08-31
PatrowlHearsData 2026-08-30
metasploit-framework 6.5.3
connect v0.3.31
orca-cli 1.120.0
connect v0.3.30
connect v0.3.29
orca-cli 1.119.1
Wiz Penetration Test Findings is now GA
Transform point-in-time pen-tests into continuous exposure management with unified platform combining pen-test findings and real-time cloud context
orca-cli 1.119.0
metadefender-k8s metadefender_storage_security-4.5.2
What we've shipped lately: August 2026
A roundup of the latest features and updates shipped to the Intruder platform, from new integrations and expanded cloud coverage to GregAI improvements and a fresh look.
metasploit-framework 6.5.2
From Patch Tuesday to Pentest Wednesday®: How a Major Transportation Company Turned AWS Attack Paths Into Action
See how a major transportation company used repeated NodeZero® AWS pentests to uncover exploitable IAM attack paths, prioritize meaningful risk, and verify that remediation actually closed the exposure.
Microsoft Patch Tuesday – August 2026
Today is Microsoft Patch Tuesday for August 2026. There are 400 vulnerabilities that have been addressed this time around. This is an unusually large release, with 42 of the flaws rated Critical and three zero-days – one of them already exploited in the wild by North Korean threat actors, and two publicly disclosed before a […] The post Microsoft Patch Tuesday – August 2026 appeared first on Outpost24.
Patch Tuesday - August 2026
Microsoft is publishing 421 vulnerabilities on August 2026 Patch Tuesday, including 236 vulnerabilities in Windows. This is lower volume than last month’s record-breaking behemoth, but still one of the largest Patch Tuesday totals ever. There is no reason to suppose that Patch Tuesday will ever return to the lower volumes we saw prior to 2026. Microsoft is aware of exploitation in the wild for one of the vulnerabilities published today, as well as public disclosure for two others, although the N
August 2026 Patch Tuesday
Regardless of what everyone thinks about AI, it’s clear that patch acceleration based on identified vulnerabilities is forcing the patch management industry to deal with the Patch Apocalypse. The magic question is how do you deal with it when even Microsoft is recommending a three-day turnaround on patching to stay ahead of the ‘AI-accelerated’ threats? The challenge is that large enterprises are constrained by testing, change control and compatibility requirements. That challenge needs to be ad
August 2026 Patch Tuesday: CISO Executive Summary
This CISO-focused summary highlights the vulnerabilities and critical infrastructure risks that should take priority for remediation following Microsoft’s August 2026 Patch Tuesday release. The post August 2026 Patch Tuesday: CISO Executive Summary first appeared on Action1.
August 2026 Patch Tuesday Brief: Start With Exploitation, Then Critical Infrastructure
August is not a month to judge by patch count alone. Microsoft released fixes for 398 vulnerabilities, including 44 Critical vulnerabilities and two zero-days. For patch administrators, the useful question is simpler: Does this affect my environment, and where should I start? The post August 2026 Patch Tuesday Brief: Start With Exploitation, Then Critical Infrastructure first appeared on Action1.
Patch Tuesday August 2026
In this issue: August 2026 Patch Tuesday updates, featuring zero-day vulnerabilities and critical security flaws. The post Patch Tuesday August 2026 first appeared on Action1.
nuclei v3.11.1
skills v0.4.0
The Wiz Red Agent is Now Generally Available
Continuously uncover complex, exploitable risks to stay ahead in the AI Threat Era with the Red Agent
Introducing AI-powered pentesting for web apps: test on every major release
AI-powered web app pentesting is now live in Intruder. Connect your repo, launch on demand, and get a full pentest report the same day.
Microsoft Patch Tuesday – July 2026
Today is Microsoft Patch Tuesday for July 2026. There are 621 vulnerabilities that have been addressed this time around. Two of them are actively exploited zero-days affecting SharePoint Server and Active Directory Federation Services, and one publicly disclosed BitLocker bypass is also included. We recommend applying these updates as soon as possible. Notable Patch Tuesday […] The post Microsoft Patch Tuesday – July 2026 appeared first on Outpost24.
July 2026 Patch Tuesday
Patch Tuesday Watch: What Led Up to July 2026 Adobe Release date: June 30, 2026 (APSB26-68 — ColdFusion; same-day bulletin for Campaign Classic) CVE count: 11 CVEs in ColdFusion, 1 in Campaign Classic (12 total) Adobe's ColdFusion update resolved 11 vulnerabilities across ColdFusion 2025 (Update 9 and earlier) and ColdFusion 2023 (Update 20 and earlier), including seven rated CVSS 10.0: Fixed in ColdFusion 2025 Update 10 and ColdFusion 2023 Update 21. KEV callout: CVE-2026-48282 was not flagged
nuclei v3.10.0
nanitor-platforms nandev v0.1.0
nuclei v3.11.0
What's new in Nipper InfraSight, v4 - Titania
Nipper InfraSight, v4, is now available and brings new features requested by customers, alongside an improved user experience.
June 2026 Patch Tuesday
Source: Graph generated using Claude (Anthropic) on June 9, 2026, based on author-designed prompts and dataset by Chris Goettl. You may have seen or heard a reference to the Patch Apocalypse, if not, you can dig into some more details here. The graph above shows a sample of several of the top vendor applications in all our environments. You can see a trailing twelve-month history of the number of CVEs resolved each month in these applications. Prior to February 2026, the scariest thing each mont
Faraday Release 5.21: Connect Your AI Agent to Vulnerability Management
Faraday Release 5.21 introduces MCP Server support, allowing AI agents and LLMs to connect directly with vulnerability management workflows. This release also includes bulk credential import, stronger security improvements, faster performance, and better visibility across the platform. The post Faraday Release 5.21: Connect Your AI Agent to Vulnerability Management appeared first on Faraday.
skills v0.3.0
skills v0.2.0
Impacket 0.13.1
Three Ollama CVEs in One Week: Bleeding Llama Plus Two Windows Updater Flaws Awaiting Release
Three distinct Ollama vulnerabilities surfaced in early May 2026 and most coverage runs them together. CVE-2026-7482 (Bleeding Llama) is a critical unauthenticated heap memory leak in the GGUF loader, fixed in 0.17.1. CVE-2026-42248 and CVE-2026-42249 are two Windows-only auto-updater bugs that chain into persistent code execution. Their fix merged on Ollama's main branch on May 11, 2026, but has not yet shipped in a tagged release. Mondoo Vulnerability Intelligence tracks all three.
What's New in Security for Ubuntu 26.04
Ubuntu 26.04 ships Linux 7.0 with Attack Vector Controls, BPF tokens, and confidential computing support. Rust replaces coreutils and sudo. Post-quantum cryptography becomes the default across the kernel, OpenSSL 3.5, and OpenSSH 10.2. Here's everything worth knowing about the security story in the new LTS.